EUVD-2026-107014
GHSA-92p4-8jf4-qc63
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach network-exposed Vite preview server (Windows)
-
ExploitSend crafted path-traversal HTTP request
-
ExecutionEscape prerendered output directory
-
ImpactRead source, config, or credentials
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires the SvelteKit Vite preview server ( |
| Impact | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) scores 8.7 (High), reflecting unauthenticated, network-reachable arbitrary file read with high confidentiality impact and no integrity or availability effect. However, the real-world priority is materially lower than the raw score suggests because the flaw exists only in the Vite preview server (a build-preview tool, not a production SvelteKit server such as adapter-node output) and only on Windows hosts. Exploitation presupposes that a developer or CI host has exposed |
| Exploit ScenarioDerived | A developer running |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 21, 2026
A path traversal vulnerability in SvelteKit's Vite preview server on Windows (versions 2.10.0 before 3.0.0) allows remote attackers to read files outside the prerendered output directory, potentially exposing source code, configuration, or credentials readable by the server process. Exploitation requires the vite preview server to be running on a Windows host and reachable over the network or via a tunnel - a non-default posture, since the preview server is normally bound to localhost. Production deployments using adapter-node or static adapters, and hosts running POSIX/Linux/macOS, are not affected; no public exploit code has been identified at time of analysis, and impact is confined to confidentiality (no integrity or availability effect).
RemediationAI
Upgrade @sveltejs/kit to version 3.0.0 or later, which is the first release outside the affected 2.10.0-before-3.0.0 range; consult the vendor advisory at https://github.com/sveltejs/kit/security/advisories/GHSA-xgrj-p7pg-6vm3 for the authoritative fix guidance. Because the vulnerability exists only in the vite preview development server, the most effective immediate control is to stop using vite preview on Windows hosts that are reachable from untrusted networks - replace it with a production adapter such as adapter-node behind a hardened reverse proxy, at the cost of a slightly more involved deployment process. If the preview server must run for testing, bind it explicitly to 127.0.0.1 (the default) and refuse to expose it through tunnels or port forwards; note that this reduces accessibility for legitimate remote testers. As an additional compensating layer, restrict inbound access to the preview port at the host firewall or via network policy to known testing addresses, and run the preview process under an account with minimal filesystem read privileges so that any successful traversal yields only non-sensitive files - both measures carry the trade-off of added operational overhead and can break legitimate shared testing workflows.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
SvelteKit is a full-stack web framework built on top of Vite, and its vite preview command is a local development utility for serving already-built output rather than a production web server. The flaw is a classic CWE-22 path traversal: crafted HTTP requests containing traversal sequences escape the confines of the prerendered output directory, and on Windows the underlying path handling allows resolution to files elsewhere on the filesystem readable by the Node process. Because the issue resides in the preview/development layer, it does not touch SvelteKit's production adapters (adapter-node, static adapter) or its routing in deployed applications. Exploitation is conditional on two environmental factors: the preview server must be Windows-hosted, and it must be exposed beyond localhost (for example by binding to a public interface or through a tunneling service), which is contrary to its intended local-only usage. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N) yields 8.7, while an independent CVSS 3.1 assessment concurs on unauthenticated network access with high confidentiality impact and no integrity or availability effect; the Windows-only and preview-server-only scope sharply limits realistic exposure.
Know when Kit gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Unauthenticated network request against a reachable preview server (AV:N/AC:L/PR:N/UI:N) yields high confidentiality file disclosure with no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a tunnel can send crafted requests to expose source code, configuration, or credentials readable by the server process.
Technical POC Analysis
Evidence caveat up front: the only supplied artefact is advisory GHSA-xgrj-p7pg-6vm3.
Full technical POC analysis - root cause, step-by-step exploitation and patch breakdown - is part of the Pro and Business plans.
Executive ViewAI
SvelteKit's Vite preview server on Windows is affected by a path traversal issue that could allow an attacker to read files outside the intended preview output when that server is exposed beyond localhost; production adapter-node/static deployments and non-Windows hosts are not affected. No public exploit identified at time of analysis, but leadership should care because exposed preview environments often contain source code, configuration, and credentials and may lack production-grade monitoring and network restrictions.
No vendor-released patch identified at time of analysis. Disable or avoid running vite preview on Windows; bind the preview server to localhost only; block network and tunnel access to preview ports; use adapter-node or static production deployments instead of preview servers; run preview services under a low-privilege account; restrict filesystem read permissions; and rotate secrets if exposure is suspected.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Related Vulnerabilities in SvelteKit Redirect, XSS, SSRF, and Path Traversal
View all 4SvelteKit is a web development kit. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authe
Remote denial-of-service in @sveltejs/kit (versions ≤ 2.70.1) is achievable by any unauthenticated attacker who sends a
SvelteKit 2.19.0-2.49.4 has SSRF/DoS affecting applications with prerendered routes. Can be exploited to make the server
Denial of service in SvelteKit versions 2.49.0 through 2.53.2 is achievable by unauthenticated remote attackers who subm
CPU exhaustion in SvelteKit's experimental remote form deserialization endpoint allows unauthenticated remote attackers
Memory exhaustion in @sveltejs/kit versions 2.49.0 through 2.52.1 allows unauthenticated remote attackers to crash the s
Request body size limit bypass in SvelteKit adapter-node allows unauthenticated attackers to submit oversized payloads,
SvelteKit versions 2.49.0 through 2.49.4 are vulnerable to denial-of-service attacks through the experimental form remot
Uncontrolled payload size acceptance in SvelteKit's remote form function handler allows unauthenticated remote attackers
SvelteKit versions prior to 2.57.1 are vulnerable to denial of service when the redirect() function is called from the h
Cross-user data disclosure in SvelteKit (npm/@sveltejs/kit versions 2.38.0 through 2.60.0) stems from a race condition i
Exploit-DB